← Back to Skills Marketplace
298
Downloads
0
Stars
0
Active Installs
10
Versions
Install in OpenClaw
/install openclaw-rtm
Description
Remember The Milk skill for OpenClaw
Usage Guidance
This package appears to be a straightforward Remember The Milk integration and is coherent with its README and code. Before installing: (1) verify you trust the skill source (the registry metadata lacks a homepage and the owner/slug are opaque); (2) expect the skill to save your API key/shared secret and the RTM auth token as plaintext JSON in your home directory (~/.rtm-credentials.json and ~/.rtm-token.json) — the code sets restrictive file permissions (0o600) but the contents are not encrypted; (3) if you prefer, use a secure secrets store rather than leaving keys in files or a .env; (4) if you uninstall, delete those files and revoke the RTM token in your RTM account; (5) the registry metadata inconsistency (required env vars: none vs plugin manifest listing required env vars) is a packaging/metadata issue — consider asking the publisher for clarification or reviewing the source code yourself before use.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-rtm
Version: 1.0.9
The skill provides a legitimate integration with the Remember The Milk (RTM) service for task management. It handles authentication via API keys and tokens, storing them locally in the user's home directory (e.g., `~/.rtm-token.json`) using restricted file permissions (mode 0600) as described in the documentation. The implementation is transparent, contains no external dependencies, and communicates exclusively with the official RTM API endpoint (api.rememberthemilk.com).
Capability Assessment
Purpose & Capability
The skill claims to integrate Remember The Milk (RTM) and the code and README exclusively implement RTM API interactions. The plugin manifest (openclaw.plugin.json) declares RTM API credentials (RTM_API_KEY, RTM_SHARED_SECRET) which are exactly what the skill needs. Note: the registry metadata included with the submission listed 'Required env vars: none' which contradicts the plugin manifest and SKILL.md; this is an inconsistency in metadata but not evidence of malicious behavior.
Instruction Scope
SKILL.md and index.js instruct the agent/user how to obtain and store RTM credentials and authorize the app. The runtime instructions and code only read/write the skill's .env (in the skill folder) and three files in the user's home directory (~/.rtm-credentials.json, ~/.rtm-token.json, ~/.rtm-id-cache.json). The README warns that the token is saved in plaintext and the code sets file mode 0o600 when writing files. There are no instructions to read unrelated system files, other credentials, or to send data to unexpected endpoints; the network calls go to official RTM endpoints.
Install Mechanism
No external download/install spec is present (instruction-only install). SKILL.md suggests 'npm link' which is standard and package.json provides a bin entry. There are no remote downloads, URL shorteners, or archive extraction steps. The package's CLI entry points to test.js (used as a lightweight CLI/test runner) which is unconventional but not inherently risky.
Credentials
The only secrets needed are the RTM API Key and Shared Secret and an RTM auth token; these are appropriate for the described purpose. The code persistently saves credentials and the auth token to files in the user's home directory; while file mode 0o600 is used, the token/credentials are stored in plaintext JSON. Also note the mismatch between the registry metadata (which shows no required env vars) and openclaw.plugin.json (which lists RTM_API_KEY and RTM_SHARED_SECRET).
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide agent settings. It persists its own credential and cache files under the user's home directory (normal for a CLI integration). The skill allows autonomous invocation (disable-model-invocation: false) which is the platform default; this combined with only RTM credentials does not create a disproportionate risk.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-rtm - After installation, invoke the skill by name or use
/openclaw-rtm - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.9
**Task management now uses persistent Task IDs instead of session-based short IDs.**
- All commands requiring a task reference now use the permanent RTM `task_id` (e.g., `8573921`) rather than a session-specific short ID.
- Command documentation and examples have been updated to reflect the new task identification method.
- Listing tasks now displays and references the persistent `task_id`, making task operations more robust and consistent.
v1.0.8
openclaw-rtm 1.0.8 Changelog
- Documentation improved in SKILL.md: formatting and section headings are now clearer and more consistent.
- Important and note callouts updated for clarity and visibility.
- Task listing command description enhanced to clarify the meaning of "completed" and "all" options.
- Property display details for task listing revised for better readability.
- No code or feature changes; this is a documentation update only.
v1.0.7
- The default behavior of the `rtm list` command now only fetches incomplete tasks for faster, cleaner responses.
- Added support for explicitly listing completed tasks (`rtm list completed`, up to 100 tasks) or all tasks (`rtm list all`).
- Documentation improved to clarify new `list` command options and results.
v1.0.6
- Added `.env.example` and `.gitignore` files to the project.
- Updated documentation with installation instructions for using the `rtm` command globally via `npm link`.
- Documented new credential configuration methods: using `rtm config` command or a `.env` file.
- Made credential storage more flexible and secure by supporting config file and environment variable options.
v1.0.5
- No changes detected in this version.
- Skill documentation and features remain unchanged from the previous release.
v1.0.4
- Added documentation for the new `rtm note` command to add notes to tasks.
- Added instructions for modifying task properties: due date, start date, priority, and postpone functionality, with relevant command examples.
- No code changes; documentation only update.
v1.0.3
- Updated setup instructions to require API credentials via environment variables instead of editing source files.
- Added warnings to improve security by discouraging embedding secrets in code.
- Included notes about handling the local authentication token safely.
- No code changes; documentation improvements only.
v1.0.2
- Added instructions for obtaining and setting Remember The Milk API credentials.
- Updated task listing to include both incomplete and completed tasks, displaying their completion status.
- Improved documentation for clarity and setup guidance.
v1.0.1
- No user-facing changes detected in this release.
- Documentation and skill functionality remain unchanged from the previous version.
v1.0.0
- Initial release of hello-world-skill for OpenClaw.
- Registers a simple hello command (`hello [name]`) that replies with a personalized greeting.
- Designed as a minimal example for learning and extension.
Metadata
Frequently Asked Questions
What is Openclaw with Remember The Milk?
Remember The Milk skill for OpenClaw. It is an AI Agent Skill for Claude Code / OpenClaw, with 298 downloads so far.
How do I install Openclaw with Remember The Milk?
Run "/install openclaw-rtm" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Openclaw with Remember The Milk free?
Yes, Openclaw with Remember The Milk is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Openclaw with Remember The Milk support?
Openclaw with Remember The Milk is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Openclaw with Remember The Milk?
It is built and maintained by creamhead (@kissyjpf); the current version is v1.0.9.
More Skills